$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/b529e450-f4c9-30a7-8830-bb51effff221.roa File: b529e450-f4c9-30a7-8830-bb51effff221.roa (raw, json) Hash identifier: 89DMuRNj7WY/eP+DujeNoHlPzFHQr2v4jfzk9WvDle8= Subject key identifier: F7:68:E9:68:C4:E4:BB:49:42:04:AC:1C:C1:D5:F6:69:DF:70:BF:7A Certificate issuer: /CN=27856758-5ea9-463e-969e-eb2a87a469d5 Certificate serial: 010D0C9F4328584F3B7D24FE02AF3AD62FEAB5A0 Authority key identifier: B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/b529e450-f4c9-30a7-8830-bb51effff221.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 64233 IP address blocks: 199.38.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:24:fe:02:af:3a:d6:2f:ea:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27856758-5ea9-463e-969e-eb2a87a469d5 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=49a82d56-4fb7-4c7d-8a4f-2a522194a2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:03:e0:a1:61:7d:02:09:f4:53:b0:12:21: b1:ed:8a:21:34:c3:02:2f:ee:ec:3e:b7:f2:50:72: d6:9b:c7:91:59:ec:07:3f:e7:d4:79:5e:4f:01:2a: 3c:f0:3c:35:86:0b:e9:54:00:d6:ea:cd:ac:10:d5: 7a:11:9e:72:3f:36:dc:ff:0c:ad:79:de:9e:7e:35: bd:69:fa:d4:ed:81:b2:de:ab:5b:1e:c0:97:a5:df: b4:1d:2a:9f:57:d8:c0:f9:4e:fa:dd:3f:da:1f:b8: dd:54:43:ce:7f:ab:73:0f:13:bc:af:21:f7:7b:e9: f2:87:c2:e4:cb:35:2d:11:bf:48:0f:f7:99:a3:92: 8a:5f:1d:7f:25:b2:e2:4e:4d:2a:26:20:92:91:a8: e6:56:c0:c0:7d:c1:09:4e:4a:fb:41:13:1b:63:c9: 6b:ac:9a:a6:fe:79:59:1c:d3:38:81:81:56:cd:0b: 2f:e1:5f:a7:78:3c:6c:8c:51:70:34:89:b3:de:96: d4:bc:43:34:73:af:b0:5f:ac:d9:d9:41:3d:c0:83: 5e:6d:88:0f:24:01:d0:90:e1:4f:36:bf:5d:37:66: d6:d9:a7:a3:31:18:0f:51:09:1f:14:09:ce:78:96: d5:66:c0:c0:59:e9:70:63:ac:14:b2:3b:50:0e:ae: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:68:E9:68:C4:E4:BB:49:42:04:AC:1C:C1:D5:F6:69:DF:70:BF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/b529e450-f4c9-30a7-8830-bb51effff221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl X509v3 Authority Key Identifier: keyid:B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer sbgp-ipAddrBlock: critical IPv4: 199.38.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a5:95:22:b2:00:68:d4:b3:db:8c:c7:91:61:4a:9c:38:7d: d4:60:cd:cd:26:03:fc:70:11:6d:be:ab:3b:b3:54:39:ec:5b: e7:04:84:5a:2e:b5:5c:0e:c1:41:82:2d:d4:db:2c:b4:9f:91: 5e:8e:02:04:23:a0:a0:8b:39:54:04:17:2f:8c:19:13:5b:90: 3a:ce:a5:4a:ac:1b:0d:f2:38:f7:f1:64:ea:df:87:48:09:5c: 97:74:9a:44:52:ca:c3:e5:fe:9f:44:bc:6e:82:1a:45:75:dc: 47:db:ce:39:05:c7:b9:67:46:84:68:1a:2c:56:de:d5:9e:7c: af:a8:6d:4f:d1:d2:bc:e7:90:a2:0f:bf:6c:57:e1:9d:8d:f3: 86:30:fa:15:fb:19:bb:4c:08:0e:7e:fc:23:98:c8:93:05:82: 79:9b:1f:7c:13:cf:6b:5c:72:26:03:91:38:ba:64:2d:3d:cc: e6:1e:23:b9:63:5b:d4:ea:3a:9c:5b:91:a7:d7:aa:8b:48:06: b5:47:40:0c:af:fa:bb:2e:9c:6c:8e:64:75:94:db:db:30:ab: e9:21:ec:71:72:66:71:2b:7f:01:3d:8e:4f:f1:66:be:b3:2b: 8c:a1:8e:f4:10:15:c5:5e:52:4b:df:52:38:8f:1e:06:cc:49: 97:c1:5f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fST+Aq861i/qtaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc4NTY3NTgtNWVhOS00NjNlLTk2OWUtZWIyYTg3YTQ2 OWQ1MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk NDlhODJkNTYtNGZiNy00YzdkLThhNGYtMmE1MjIxOTRhMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG0D4KFhfQIJ9FOwEiGx7YohNMMCL+7sPrfy UHLWm8eRWewHP+fUeV5PASo88Dw1hgvpVADW6s2sENV6EZ5yPzbc/wyted6efjW9 afrU7YGy3qtbHsCXpd+0HSqfV9jA+U763T/aH7jdVEPOf6tzDxO8ryH3e+nyh8Lk yzUtEb9ID/eZo5KKXx1/JbLiTk0qJiCSkajmVsDAfcEJTkr7QRMbY8lrrJqm/nlZ HNM4gYFWzQsv4V+neDxsjFFwNImz3pbUvEM0c6+wX6zZ2UE9wINebYgPJAHQkOFP Nr9dN2bW2aejMRgPUQkfFAnOeJbVZsDAWelwY6wUsjtQDq46sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdo6WjE5LtJQgSsHMHV9mnfcL96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNzg1 Njc1OC01ZWE5LTQ2M2UtOTY5ZS1lYjJhODdhNDY5ZDUvYjUyOWU0NTAtZjRjOS0z MGE3LTg4MzAtYmI1MWVmZmZmMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjc4NTY3NTgtNWVhOS00NjNlLTk2 OWUtZWIyYTg3YTQ2OWQ1LzI3ODU2NzU4LTVlYTktNDYzZS05NjllLWViMmE4N2E0 NjlkNS5jcmwwHwYDVR0jBBgwFoAUuKJpMmkN/JGR+c0zFylDRyUConcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNzg1Njc1OC01ZWE5LTQ2M2UtOTY5ZS1lYjJh ODdhNDY5ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqllSKyAGjUs9uMx5FhSpw4fdRgzc0mA/xwEW2+qzuzVDnsW+cEhFou tVwOwUGCLdTbLLSfkV6OAgQjoKCLOVQEFy+MGRNbkDrOpUqsGw3yOPfxZOrfh0gJ XJd0mkRSysPl/p9EvG6CGkV13EfbzjkFx7lnRoRoGixW3tWefK+obU/R0rznkKIP v2xX4Z2N84Yw+hX7GbtMCA5+/COYyJMFgnmbH3wTz2tcciYDkTi6ZC09zOYeI7lj W9TqOpxbkafXqotIBrVHQAyv+rsunGyOZHWU29swq+kh7HFyZnErfwE9jk/xZr6z K4yhjvQQFcVeUkvfUjiPHgbMSZfBX7A= -----END CERTIFICATE-----Generated at Mon Oct 12 20:49:48 2026 by rpki-client